In the Claims 

Claims are amended as follows: 
1 to 19. (cancelled) 

20. (new) A communication system comprising: 

a plurality of virtual private networks VPNs' interconnected bv a first 

data network: 

a second data network connected to the plurality of VPNs via the first 

data network, the second data network using a network addressing scheme that is 
different to a network addressing scheme used bv at least one of said plurality of 
VPNs: and 

a VPN media proxy interfacing the first and second data networks, the 

VPN media proxy being configured to pass information from a source address in 
said at least one of said plurality of VPNs to a destination address in said second 
data network, the VPN media proxy having an address translator arranged to 
translate the destination address of the information in accordance with the network 
addressing scheme of the second data network, and to send the information 
towards the translated destination address in the second data network. 

21. (new) The communication system as claimed in claim 20. wherein the address 
translator is arranged to translate a destination address of information being 
transmitted from a source address in the second data network to a destination 
address in said at least one of said plurality of VPNs in accordance with the network 
addressing scheme of said at least one of said plurality of VPNs, and to send the 
information towards the translated destination address in said at least one of said 
plurality of VPNs. 
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22. (new) The communication system as claimed in claim 21 , wherein the first data 
network is a public data network using a public Internet Protocol IP' network 
addressing scheme, the second data network is a carrier data network using a 
private IP network addressing scheme and one or more of said plurality of VPNs 
uses a private IP network addressing scheme. 

23. (new) The communication system as claimed in claim 22, wherein, where more 
than one of the VPNs use a private IP network addressing schemes, some of said 
private IP network addressing schemes have overlapping address ranges. 

24. (new) The communication system as claimed in claim 22. wherein the carrier 
data network interfaces the public data network to a switched telephone network 
'STN' via a trunk gateway whose carrier data network IP address is the destination 
address for information being transmitted from a source address in any of the VPNs 
to a destination address in the carrier data network. 

25. (new) The communication system as claimed in claim 24. wherein the STN is a 
public STN PSTN'. 

26. (new) The communication system as claimed in claim 24. further comprising a 
VPN gateway interfacing the public and carrier data networks, the VPN gateway 
being configured to transmit call signaling information between said at least one of 
said plurality of VPNs and the carrier data network via the public data network and 
the VPN media proxy being configured to transmit bearer information comprising a 
call between said at least one of said plurality of VPNs and the carrier data network 

. via the public data network once a call has been established in response to said 
transmission of call signaling information, the address translator of the VPN media 
proxy being configured to translate a destination address of said bearer information 
to the carrier data network IP address of the trunk gateway. 
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27. (new) The communication system of claim 26, wherein the call signaling 
comprises voice over IP VoIP' call signaling and the call comprises a VoIP call. 



28. (new) The communication system as claimed in claim 22, wherein the VPN 
media proxy is configured to provide a virtual routing function to each VPN, each 
virtual routing function using a private IP network addressing scheme of its 
respective VPN. 

29. (new) The communication system as claimed in claim 28. wherein the address 
translator of the VPN media proxy is configured to provide a network address 
translation function to each of the virtual routing functions. 

30. (new) A method of address translation in a communication system comprising 
a plurality of virtual private networks 'VPNs' interconnected by a first data network; a 
second data network connected to the plurality of VPNs via the first data network, 
the second data network using a network addressing scheme that is different to a 
network addressing scheme used by at least one of said plurality of VPNs; and a 
VPN media proxy interfacing the first and second data networks, the method 
comprising; 

. passing information via the VPN media proxy from a source address 

in said at least one of said plurality of VPNs to a destination address in said second 
data network; 

at an address translator of the VPN media proxy, translating the 

destination address of the information in accordance with the network addressing 
scheme of the second data network, and 

sending the information towards the translated destination address in 

the second data network. 

31. (new) The method as claimed in claim 30. wherein the address translator 
translates a destination address of information being transmitted from a source 
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address in the second data network to a destination address in said at least one of 
said plurality of VPNs in accordance with the network addressing scheme of said at 
least one of said plurality of VPNs, and sends the information towards the translated 
destination address in said at least one of said plurality of VPNs. 

32. (new) The method as claimed in claim 31, wherein the VPN media proxy 
provides a virtual routing function to each VPN, each virtual routing function using a 
private IP network addressing scheme of its respective VPN. 

33. (new) The method as claimed in claim 32. wherein the address translator of the 
VPN media proxy provides a network address translation function to each of the 
virtual routing functions. 

34. (new) The method as claimed in claim 31. wherein the first data network is a 
public data network using a public Internet Protocol 'IP' network addressing 
scheme, the second data network is a carrier data network using a private IP 
network addressing scheme and one or more of said plurality of VPNs uses a 
private IP network addressing scheme. 

35. (new) The method as claimed in claim 31. wherein, where more than one of 
the VPNs use a private IP network addressing schemes, some of said private IP 
network addressing schemes have overlapping address ranges. 

36. (new) The method as claimed in claim 31. wherein the carrier data network 
interfaces the public data network to a switched telephone network 'STN' via a trunk 
gateway whose carrier data network IP address is the destination address for 
information being transmitted from a source address in any of the VPNs to a 
destination address in the carrier data network. 



37. (new) The method as claimed in claim 36. wherein the STN is a public STN 
PSTN'. 

38. (new) The method as claimed in claim 36. wherein the communication system 
further comprises a VPN gateway interfacing the public and carrier data networks, 
the VPN gateway transmitting voice over IP VoIP' call signaling information 
between said at least one of said plurality of VPNs and the carrier data network via 
the public data network and the VPN media proxy transmitting bearer information 
comprising a VoIP call between said at least one of said plurality of VPNs and the 
carrier data network via the public data network once a VoIP call has been 
established in response to said transmission of VoIP call signaling information, the 
address translator of the VPN media proxy translating a destination address of said 
bearer information to the carrier data network IP address of the trunk gateway. 

39. (new) A virtual private network VPN' media proxy for a communication system 
comprising a plurality of virtual private networks VPNs' interconnected by a first 
data network and a second data network connected to the plurality of VPNs via the 
first data network, the second data network using a network addressing scheme that 
is different to a network addressing scheme used bv at least one of said plurality of 
VPNs: the VPN media proxy comprising: 

a first interface for interfacing with the first data network: 

a second interface for interfacing with the second data network: and 

information passing means configured to pass information from a 

source address in said at least one of said plurality of VPNs to a destination address 
in said second data network, said information passing means comprising an 
address translator for translating the destination address of the information in 
accordance with the network addressing scheme of the second data network and 
sending the information towards the translated destination address in the second 
data network. 
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40. (new) The VPN media proxy as claimed in claim 39. wherein the address 
translator is arranged to translate a destination address of information being 
transmitted from a source address in the second data network to a destination 
address in said at least one of said plurality of VPNs in accordance with the network 
addressing scheme of said at least one of said plurality of VPNs, and to send the 
information towards the translated destination address in said at least one of said 
plurality of VPNs. 

41 (new) The VPN media proxy as claimed in claim 40. wherein the VPN media 
proxy is configured to provide a virtual routing function to each VPN, each virtual 
routing function using a private IP network addressing scheme of its respective 
VPN. 



42. (new) The VPN media proxy as claimed in claim 41. wherein the address 
translator of the VPN media proxy is configured to provide a network address 
translation function to each of the virtual routing functions. 

43. (new) The VPN media proxy as claimed in claim 40, wherein the first data 
network is a public data network using a public Internet Protocol IP' network 
addressing scheme, the second data network is a carrier data network using a 
private IP network addressing scheme and one or more of said plurality of VPNs 
uses a private IP network addressing scheme, the carrier data network interfaces 
the public data network to a switched telephone network 'STN' via a trunk gateway 
whose carrier data network IP address is the destination address for information 
being transmitted from a source address in any of the VPNs to a destination 
address in the carrier data network, a VPN gateway is provided to interface the 
public and carrier data networks and to transmit voice over IP VoIP 1 call signaling 
information between said at least one of said plurality of VPNs and the carrier data 
network via the public data network and wherein the information passing means is 
configured to transmit bearer information comprising a VoIP call between said at 



least one of said plurality of VPNs and the carrier data network via the public data 
network once a VoIP call has been established in response to said transmission of 
VoIP call signaling information, the address translator being configured to translate 
a destination address of said bearer information to the carrier data network IP 
address of the trunk gateway. 

34. (new) The VPN media proxy as claimed in claim 33. wherein, where more than 
one of the VPNs use a private IP network addressing schemes, some of said private 
IP network addressing schemes have overlapping address ranges. 

44. (new) The VPN media proxy as claimed in claim 43. wherein the STN is a 
public STN 'PSTN'. 

45. (new) The VPN media proxy as claimed in claim 40, further comprising a 
configuration store for storing configuration information comprising source and 
destinations addresses for information being transmitted between an entity in one of 
said plurality of VPNs and an entity in said second data network, wherein said 
configuration information includes information associating said source and 
destination addresses with respective target addresses, said target addresses 
comprising the translated destination addresses in said one of said plurality of VPNs 
and said second data network. 

46. (new) A computer readable medium storing computer readable instructions 
which, when executed by a processor of a computing device, cause said computing 
device to implement in a communication system comprising a plurality of virtual 
private networks VPNs' interconnected by a first data network: a second data 
network connected to the plurality of VPNs via the first data network, the second 
data network using a network addressing scheme that is different to a network 
addressing scheme used bv at least one of said plurality of VPNs: and a VPN media 
proxy interfacing the first and second data networks, the steps of: 



passing information via the VPN media proxy from a source address 

in said at least one of said plurality of VPNs to a destination address in said second 
data network; 

at an address translator of the VPN media proxy, translating the 

destination address of the information in accordance with the network addressing 
scheme of the second data network, and 

sending the information towards the translated destination address in 

the second data network. 
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